Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1yZm0yLWY5NGotcWhqcM4AA7Om

OpenStack Storlets arbitrary code execution vulnerability

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.

Permalink: https://github.com/advisories/GHSA-rfm2-f94j-qhjp
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZm0yLWY5NGotcWhqcM4AA7Om
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 7 months ago
Updated: 5 months ago

CVSS Score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-rfm2-f94j-qhjp, CVE-2024-28717
References:

• https://nvd.nist.gov/vuln/detail/CVE-2024-28717
• https://bugs.launchpad.net/storlets/+bug/2047723
• https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f
• https://github.com/openstack/storlets/commit/5ad58804af885db3eb7a78bea5000c401eeeb70e
• https://github.com/advisories/GHSA-rfm2-f94j-qhjp

Repository: https://github.com/openstack/storlets
Blast Radius: 2.3

Affected Packages